Lead Systems Engineer - Cyber Security

About this role

Job description

Terms & Conditions: 37 Hours, Full time, Permanent

Department: IT

Shortlisting: w/c 31st August 2026

Interviews: w/c 7th September 2026

Are you passionate about cyber security and ready to lead a team that protects critical services while shaping the future of secure digital delivery?

We’re looking for an experienced Lead Systems Engineer (Cyber Security) to take a leading role in our Cyber Security function, combining hands-on technical expertise with people leadership and strategic thinking. This is a fantastic opportunity to influence how cyber security services are delivered across a large, complex organisation and help drive improvements that genuinely make a difference.

As our Lead Systems Engineer (Cyber Security), you’ll provide senior technical leadership across the Council’s cyber security services, ensuring systems, data and digital services remain secure, resilient and compliant.

You’ll act as the senior escalation point for complex security incidents and technical issues, lead service improvements, and work closely with other Lead Systems Engineers and the Architecture Team to ensure security is embedded within the design, delivery and operation of the Council’s technology estate.

You’ll also manage and mentor a small team of Systems Engineers, supporting their professional development whilst ensuring high-quality cyber security services are delivered day to day.

What you’ll be doing

• Leading the operational delivery and continuous improvement of cyber security services, ensuring systems remain secure, resilient and protected from emerging threats.
• Providing expert-level 3rd line support and acting as the senior escalation point for complex cyber security incidents, risks and technical issues.
• Managing and developing a team of Systems Engineers, coordinating workloads, mentoring staff and supporting career progression.
• Leading or supporting cyber incident response activities, including investigation, containment, eradication, recovery, root cause analysis and lessons learned reviews.
• Overseeing vulnerability management activities, threat monitoring, security assessments, patch prioritisation and remediation planning.
• Developing and maintaining cyber security policies, technical standards, operational procedures, playbooks and supporting documentation.
• Working closely with the Architecture Team and other technical leads to ensure security is integrated into enterprise technology solutions and strategic initiatives.
• Leading the technical delivery of cyber security projects and service improvements from planning through to operational support.
• Supporting compliance against cyber security frameworks, audit recommendations, data protection requirements and organisational policies.
• Producing meaningful cyber security reports, risk updates and service metrics for technical and non-technical audiences.
• Maintaining strong relationships with internal stakeholders, suppliers, partners and senior leaders to support the delivery of secure and effective services.

What we're looking for

You'll bring a strong background in cyber security, infrastructure or technical operations, with the confidence to lead both technically and professionally. You'll be comfortable managing complex security challenges, responding to incidents, communicating risk, and helping shape the organisation's cyber security posture.

You'll enjoy mentoring others, solving complex problems and working collaboratively to deliver secure and reliable technology services.

Essential knowledge and experience

• Significant experience working within a cyber security, infrastructure or enterprise technology environment.
• Strong understanding of cyber security principles, controls and best practices across on-premise and cloud environments.
• Experience leading cyber security operations, incident response and vulnerability management activities.
• Experience managing or mentoring technical teams in a service-led environment.
• Strong understanding of Microsoft security technologies and cyber security monitoring platforms.
• Experience working with cyber security frameworks, governance requirements and audit processes.
• Ability to communicate technical information and cyber risks clearly to both technical and non-technical audiences.
• Experience of supplier management and working collaboratively across multidisciplinary IT teams.

Professional certifications

The successful candidate will hold, or be willing to work towards, one or more of the following recognised cyber security certifications:

• CISSP (Certified Information Systems Security Professional)
• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• Microsoft Certified: Security Operations Analyst Associate (SC-200)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)

Equivalent cyber security qualifications and experience will also be considered.

Why join us?

• A chance to shape and lead the Cyber Security function, protecting services that support residents, businesses and Council operations.
• A leadership role with real scope to improve security capability, resilience and service quality.
• Opportunities to work closely with Enterprise Architecture and senior stakeholders on organisation-wide initiatives.
• Exposure to a diverse technology estate spanning cloud, infrastructure, data and digital services.
• A supportive environment that values collaboration, learning and continuous improvement.

Additional information

This role includes participation in an on-call rota and out-of-hours support for critical incidents, planned maintenance activities and emergency response requirements.

For an informal chat about the role please contact mohammed Patel at Mohammed.Patel@blackburn.gov.uk

Job details

Date posted

30/07/2026

Application closing date

29/08/2026

Package

Blank

Contractual hours

37

Basis

Full time

Job category/type

Council

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.